$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft File: gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json) Hash identifier: bjZCs6HUW/JheQhvnlM0+BLw5CwetK7A3sKm2etEQDM= Subject key identifier: F9:42:06:32:55:21:30:C2:CA:D9:BC:AF:49:6E:C1:AF:A0:C8:80:2A Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 3590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft Manifest number: 34F0 Signing time: Wed 02 Jul 2025 14:45:49 +0000 Manifest this update: Wed 02 Jul 2025 14:45:49 +0000 Manifest next update: Wed 09 Jul 2025 14:45:49 +0000 Files and hashes: 1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: A+rF2Zd1M798JmTjtIlhCctuoXGQvJVsU6EkxpthAAA=) 2: 24108E38125C11EFA53AA21EC4F9AE02.roa (hash: s101UD1+GGZxOE2yXi7lVR2XIPtVbKsE3uJK6JYC/EE=) 3: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: 2jXUTHIbe/4zB55x5aVqbJ++TpfrSTqoaosirfZlKp4=) 4: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: 5cjv87E7FAZqd3193QuNq5bRHkYA3ye+wyuYdUoIY3A=) 5: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: MUiCEFkOTO4FtkjvpufTX4GTFRhCPjdetQYvgSwrwG0=) 6: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: 7vOKeyVZ+3C3IU2Q2LWPiPgpmUgrqFfYYBhoSV6xIdA=) 7: 29F5CB12FB5411ED914D5C39C4F9AE02.roa (hash: RrrTkRX+rWyyZhM8KHAHBGKXaTdXrGFwvTaJ7oPHcN4=) 8: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: tmtO11OOtDriXyiX8yIjjm/tLba1skzLPKICGtpamPs=) 9: 7D883CF033F911E98674843BC4F9AE02.roa (hash: kvRz79x323/sz1CS5sLMmHqk7HExlk2aKA5DVgo+je4=) 10: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: cjk5XxryDCD9iYNOdFDhTcqSurq/6QehBRcXynDGfWE=) 11: A8689054340411E9A22CD05CC4F9AE02.roa (hash: 9Abm2hwP5n1eigQRbM/2Ald4kJwUC5p7xAvKRar2kxA=) 12: 9F5180204DE611ED852CCB87C4F9AE02.roa (hash: wy+enGcGeSN++0osIT+ZWQE8DLERoeDktLi1Ly3lgZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: Jul 2 14:45:49 2025 GMT Not After : Jul 9 14:45:49 2025 GMT Subject: CN=6865461d-c328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:27:af:aa:e0:55:3b:81:71:5d:4f:f6:ec:d5: c5:dc:40:7e:49:6a:89:75:27:e1:3a:1f:7b:91:a4: 16:51:b0:2c:8e:4a:1c:75:50:78:0e:e1:8c:f8:e6: d7:91:ed:60:91:53:be:dc:81:32:78:78:51:04:fc: b4:30:37:8e:0f:10:d8:26:c3:83:71:da:82:ae:c1: 35:c1:9c:90:04:12:96:57:50:dd:45:ad:3a:f2:f5: 0f:b3:cc:9c:5f:ca:71:39:2a:58:c5:3a:da:52:9c: 59:20:63:02:91:a0:24:63:57:a9:25:ce:46:a8:47: 27:14:81:55:c4:11:ba:66:8a:f9:f5:73:f5:6e:c4: 27:4d:93:82:ba:c0:73:72:3c:a2:40:45:36:44:6b: 21:71:64:2f:eb:ac:61:8a:55:cb:f7:20:66:37:b1: da:73:85:72:7a:df:e9:ea:06:80:8b:e1:e3:14:eb: a3:34:df:7d:95:c0:ba:2b:06:93:96:a1:11:73:ae: 14:5c:ba:2e:ce:f1:b1:5a:3a:29:d0:c6:de:ad:ab: 40:52:07:b7:d9:dd:be:9b:34:6a:51:8b:f8:ff:dc: 60:e5:f0:73:d8:1a:20:cb:57:b2:1f:b5:8c:bf:76: f6:76:9d:4e:99:37:78:7b:fb:5f:35:0a:0c:a4:4d: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:42:06:32:55:21:30:C2:CA:D9:BC:AF:49:6E:C1:AF:A0:C8:80:2A X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7c:f3:80:03:8c:8d:54:3c:af:7a:44:fd:7c:da:b9:a5:e7: 23:9f:cc:83:6b:a9:37:65:b6:53:1b:47:0b:14:22:e9:31:2c: f6:d8:ee:e8:d5:e3:b5:66:07:b4:e8:db:99:11:f8:53:bc:65: fe:d5:f6:ce:52:f3:44:fe:bb:64:7d:5d:58:3b:93:7d:99:72: 55:e0:44:07:3d:a0:fe:05:a5:af:56:fb:b1:1a:c5:fa:e4:b5: a3:da:c8:5f:a5:ab:f3:d0:4b:ee:da:5e:11:01:c1:cc:96:2c: 9b:f8:4a:7b:c6:87:c4:19:68:bf:42:87:df:b2:c7:78:1b:27: 62:44:46:eb:66:7e:47:fb:e3:65:2e:e0:64:80:0e:ca:65:5a: 65:04:cf:99:d8:b8:8a:54:a5:58:db:63:a5:fd:bb:f6:2a:f2: 3b:49:a5:28:42:69:6e:38:cc:69:86:b7:4f:7c:3f:c1:bd:d3: e1:6d:e4:11:45:42:79:53:df:ca:a0:7b:ce:3c:2c:80:1c:05: 50:86:9d:01:c4:e8:a5:f1:3a:da:e7:92:8e:9d:35:e4:b9:19: e7:8e:ca:a5:3d:79:fd:74:4e:c3:8b:8e:88:21:1e:5c:9e:dc: af:fb:49:1f:14:fd:4b:bf:1d:d8:e3:bb:01:33:c0:d0:65:15: 03:45:13:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjUwNzAyMTQ0NTQ5WhcNMjUwNzA5MTQ0NTQ5WjAYMRYwFAYD VQQDEw02ODY1NDYxZC1jMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SevquBVO4FxXU/27NXF3EB+SWqJdSfhOh97kaQWUbAsjkocdVB4DuGM+ObX ke1gkVO+3IEyeHhRBPy0MDeODxDYJsODcdqCrsE1wZyQBBKWV1DdRa068vUPs8yc X8pxOSpYxTraUpxZIGMCkaAkY1epJc5GqEcnFIFVxBG6Zor59XP1bsQnTZOCusBz cjyiQEU2RGshcWQv66xhilXL9yBmN7Hac4Vyet/p6gaAi+HjFOujNN99lcC6KwaT lqERc64UXLouzvGxWjop0MberatAUge32d2+mzRqUYv4/9xg5fBz2Bogy1eyH7WM v3b2dp1OmTd4e/tfNQoMpE1KAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlCBjJV ITDCytm8r0luwa+gyIAqMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTMxOC9EQzc0NTFGMjFEOTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRL b3czbkNqRWE0dmhKR0p2R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgfPOAA4yNVDyvekT9fNq5pecjn8yDa6k3ZbZTG0cLFCLpMSz22O7o 1eO1Zge06NuZEfhTvGX+1fbOUvNE/rtkfV1YO5N9mXJV4EQHPaD+BaWvVvuxGsX6 5LWj2shfpavz0Evu2l4RAcHMliyb+Ep7xofEGWi/Qoffssd4GydiREbrZn5H++Nl LuBkgA7KZVplBM+Z2LiKVKVY22Ol/bv2KvI7SaUoQmluOMxphrdPfD/BvdPhbeQR RUJ5U9/KoHvOPCyAHAVQhp0BxOil8Tra55KOnTXkuRnnjsqlPXn9dE7Di46IIR5c ntyv+0kfFP1Lvx3Y47sBM8DQZRUDRRPS -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:14 2025 by rpki-client